CVE-2024-49836: Improper Validation of Array Index in Camera
Memory corruption may occur during the synchronization of the cameras frame processing pipeline.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/opensource/camera-kernelto a version that resolves this vulnerability.Fixed in SoCVersion:2025-03-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49836?
CVE-2024-49836 is classified as a critical vulnerability due to the potential for memory corruption leading to exploitation.
How do I fix CVE-2024-49836?
Fixing CVE-2024-49836 requires applying the latest security firmware updates provided by Qualcomm for the affected devices.
Which devices are affected by CVE-2024-49836?
CVE-2024-49836 affects various Qualcomm firmware products including FastConnect, Snapdragon, and Qmp series devices.
What impact does CVE-2024-49836 have on system integrity?
The impact of CVE-2024-49836 includes potential system crashes or unauthorized access due to memory corruption.
Is there a known exploitation of CVE-2024-49836?
As of now, there are no confirmed reports of exploitation related to CVE-2024-49836, but it is advised to secure the affected devices immediately.